Static task
static1
Behavioral task
behavioral1
Sample
1837cb1f176a764403cfff56b03830ce_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1837cb1f176a764403cfff56b03830ce_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1837cb1f176a764403cfff56b03830ce_JaffaCakes118
-
Size
315KB
-
MD5
1837cb1f176a764403cfff56b03830ce
-
SHA1
306e16889800890f5ce314a0d0957e032ae27126
-
SHA256
76eeb385b7a8b02bf0212107fa8ca6168c3642d3f11fb1380bba92b7a7e2ad34
-
SHA512
844cda1d8062b1fc45a53954312034d6919dad863264b35fe1e68e32718bd83a751155b78c234d8ad16a579b58fa5c271553b691aca748b96f3d1427f394c9d0
-
SSDEEP
6144:qh3erdUZQkEVzYIfW7klkdHHJY9zbtzkt3YqKwG43C4K996WCZsjf:qh3eKZQpKIfidnJYdyt3Xy4KC/Wf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1837cb1f176a764403cfff56b03830ce_JaffaCakes118
Files
-
1837cb1f176a764403cfff56b03830ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c4ea7a2138622ba9d6a31a8ae98da26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
CreateProcessA
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeLibrary
GetACP
GetCommandLineA
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersionExA
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetEndOfFile
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
user32
SetWindowLongA
ShowWindow
SystemParametersInfoA
KillTimer
MoveWindow
IsWindowVisible
GetWindowTextA
FindWindowA
ExitWindowsEx
advapi32
GetMultipleTrusteeOperationA
CryptSetProvParam
CryptGenKey
CreateServiceA
RegSaveKeyA
LookupPrivilegeDisplayNameA
InitiateSystemShutdownExW
EnumServicesStatusExW
GetFileSecurityW
AddAuditAccessAceEx
AddUsersToEncryptedFile
BackupEventLogW
security
AcquireCredentialsHandleW
VerifySignature
EncryptMessage
AcceptSecurityContext
olepro32
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleCreateFontIndirect
Sections
.text Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ